You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "star (Jira)" <ji...@apache.org> on 2019/12/05 12:41:00 UTC
[jira] [Updated] (RANGER-2664) filterListCmdObjects does not work
in sql 'show databases'
[ https://issues.apache.org/jira/browse/RANGER-2664?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
star updated RANGER-2664:
-------------------------
Description:
In hive plugin, when execute sql 'show databases',
privilege HiveAccessType.USE is required on database '*'. If it is authorized USE privilege, all database will be showed. If not, the sql will be stuck when checking privilege.
To solve the problem, just let the sql 'show databases' pass through when METASTORE_FILTER_HOOK is not set as AuthorizationMetaStoreFilterHook. Privilege HiveAccessType.USE is not required on database '*'.
was:
In hive plugin, when execute sql 'show databases',
privilege HiveAccessType.USE is required on database '*'. If it is authorized USE privilege, all database will be showed. If not, the sql will be stuck when checking privilege.
To solve the problem, just let the sql 'show databases' pass through when
METASTORE_FILTER_HOOK
is not set as
AuthorizationMetaStoreFilterHook. Privilege HiveAccessType.USE is not required on database '*'.
> filterListCmdObjects does not work in sql 'show databases'
> ----------------------------------------------------------
>
> Key: RANGER-2664
> URL: https://issues.apache.org/jira/browse/RANGER-2664
> Project: Ranger
> Issue Type: Bug
> Components: plugins
> Reporter: star
> Priority: Major
>
> In hive plugin, when execute sql 'show databases',
> privilege HiveAccessType.USE is required on database '*'. If it is authorized USE privilege, all database will be showed. If not, the sql will be stuck when checking privilege.
> To solve the problem, just let the sql 'show databases' pass through when METASTORE_FILTER_HOOK is not set as AuthorizationMetaStoreFilterHook. Privilege HiveAccessType.USE is not required on database '*'.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)